CVE-2007-4264

Published: Aug 9, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) path and (2) download parameters.

Affected (1)

Products: Kai Blankenhorn Bitfolge: Simple And Nice Index File

Kai Blankenhorn Bitfolge

1 product

Simple And Nice Index File

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kai Blankenhorn Bitfolge Simple And Nice Index File	Up to 1.5.2

References (8)

http://osvdb.org/38701

Source: cve@mitre.org

http://pridels-team.blogspot.com/2007/08/snif-xss-vuln.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/25212

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35813

Source: cve@mitre.org

http://osvdb.org/38701

Source: af854a3a-2127-422b-91ae-364da2661108

http://pridels-team.blogspot.com/2007/08/snif-xss-vuln.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25212

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35813

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.